Vulnerabilities CVE-2021-36942

CVE-2021-36942

High

Open

KEV

TLP:CLEAR

Windows LSA Spoofing Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Microsoft — Windows — Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM.

Details

CVSS Score: 7.5
EPSS Score ⓘ: 66.02%

99.2th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
Confidence: 100%
Published: Aug 12, 2021
Last Modified: Aug 10, 2026
CISA KEV
Date Added: Nov 3, 2021
Patch Due: Nov 17, 2021
Required Action: Apply updates per vendor instructions.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.